Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/5f4518-82e9-4292-a54e-15cc9dc7bd87/1/oWsNirSUNlULar9Ft5A1rsav8jw.mft
File:                     oWsNirSUNlULar9Ft5A1rsav8jw.mft (raw, json)
Hash identifier:          VWXXlu6VTPTiLGy80D/uRdmw7Zd2s39+qblm1YRer68=
Subject key identifier:   40:C9:24:27:6D:8C:31:FE:E0:04:59:4B:A9:29:4D:28:98:C7:AC:FD
Authority key identifier: A1:6B:0D:8A:B4:94:36:55:0B:6A:BF:45:B7:90:35:AE:C6:AF:F2:3C
Certificate issuer:       /CN=a16b0d8ab49436550b6abf45b79035aec6aff23c
Certificate serial:       01977E9F02DCEF42A700E125F3DF17B1D5F8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/oWsNirSUNlULar9Ft5A1rsav8jw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b8/5f4518-82e9-4292-a54e-15cc9dc7bd87/1/oWsNirSUNlULar9Ft5A1rsav8jw.mft
Manifest number:          159F
Signing time:             Tue 17 Jun 2025 16:00:39 +0000
Manifest this update:     Tue 17 Jun 2025 16:00:39 +0000
Manifest next update:     Wed 18 Jun 2025 16:00:39 +0000
Files and hashes:         1: G7lrDh3ng-GW-cZtTDXP_4Uyeeo.roa (hash: 8XSDBL+Th3lG4+DHiWnSkzinVN6T0SXBXCnACUJdD3Y=)
                          2: GelQ-wpEtVaOdgayfz6S6TVZ0zQ.roa (hash: /97Q6YMRjpTXM1yiFxK+BKHm6SI3QfLA+ZDxZJQchX4=)
                          3: QkvmRVh9vbjetaUTQDKmilh3yjI.roa (hash: QQUY9iioyezmP/+TplWuIp1XntdAN5iG4imSGslQuKQ=)
                          4: oWsNirSUNlULar9Ft5A1rsav8jw.crl (hash: SYvri7lt3zCegM6YiftD67f2v7/6B23Mtz96FFr3Y7U=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b8/5f4518-82e9-4292-a54e-15cc9dc7bd87/1/oWsNirSUNlULar9Ft5A1rsav8jw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b8/5f4518-82e9-4292-a54e-15cc9dc7bd87/1/oWsNirSUNlULar9Ft5A1rsav8jw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/oWsNirSUNlULar9Ft5A1rsav8jw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 18 Jun 2025 13:26:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:7e:9f:02:dc:ef:42:a7:00:e1:25:f3:df:17:b1:d5:f8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a16b0d8ab49436550b6abf45b79035aec6aff23c
        Validity
            Not Before: Jun 17 16:00:39 2025 GMT
            Not After : Jun 18 16:00:39 2025 GMT
        Subject: CN=40c924276d8c31fee004594ba9294d2898c7acfd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:84:87:7d:1a:7a:e6:f2:76:10:65:d5:33:c2:
                    47:78:24:ee:39:fc:dd:80:99:41:aa:fc:85:ee:4b:
                    bc:1b:f5:25:8e:a5:23:03:e6:45:94:fd:38:d5:d2:
                    03:f9:ae:0b:8a:0b:71:ee:2d:b5:fe:b2:66:ea:86:
                    92:64:33:c8:db:78:e2:a8:08:e1:ac:46:6b:fb:f0:
                    99:a0:3a:83:cd:38:af:e0:8c:62:bc:9c:85:00:fb:
                    0a:b8:35:76:ac:a5:09:e1:ec:bb:93:ee:a0:5f:c4:
                    ed:d0:39:50:2f:1e:4d:f7:3a:08:fb:9f:78:03:bb:
                    cd:13:b5:49:c6:ec:cb:61:cf:bc:b6:97:d9:8a:7d:
                    15:ea:51:88:d6:69:21:7b:27:33:be:d9:a6:9f:3f:
                    17:88:ec:f2:b5:a7:a6:1d:d3:7c:e5:b5:1b:b0:f0:
                    df:a2:29:d4:5d:30:10:7e:61:a5:5a:84:bd:bd:7e:
                    28:f0:48:94:82:24:df:fc:2c:90:6f:f8:b8:db:25:
                    8d:0a:39:bc:72:91:ed:6c:da:25:42:08:3e:f7:00:
                    6c:f1:f2:f7:87:88:a4:c0:db:a5:5b:eb:be:f5:fc:
                    17:14:88:86:55:34:38:78:cf:10:40:2e:9c:44:d6:
                    83:5a:b6:74:aa:e0:e2:48:7b:6b:57:6e:4c:4e:5e:
                    3b:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                40:C9:24:27:6D:8C:31:FE:E0:04:59:4B:A9:29:4D:28:98:C7:AC:FD
            X509v3 Authority Key Identifier:
                keyid:A1:6B:0D:8A:B4:94:36:55:0B:6A:BF:45:B7:90:35:AE:C6:AF:F2:3C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oWsNirSUNlULar9Ft5A1rsav8jw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/5f4518-82e9-4292-a54e-15cc9dc7bd87/1/oWsNirSUNlULar9Ft5A1rsav8jw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/5f4518-82e9-4292-a54e-15cc9dc7bd87/1/oWsNirSUNlULar9Ft5A1rsav8jw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         01:1f:64:03:3b:a2:0b:b1:2a:e0:be:33:4c:66:a8:bf:69:6e:
         95:97:ae:d7:f2:3d:15:61:68:a6:94:9d:1c:d3:f6:7a:36:2b:
         75:31:81:fc:21:bf:32:49:26:48:67:ea:8d:0c:92:8b:58:5a:
         51:97:33:e7:f5:b7:56:87:ed:0e:a0:bc:56:20:16:9b:f2:b5:
         db:9d:0a:ca:10:24:ec:fe:13:a3:35:fc:22:03:29:e9:fd:e1:
         c2:4b:81:64:c0:d8:d0:04:ad:58:d9:80:a8:07:2e:e7:eb:5e:
         13:60:f3:0b:60:8e:0f:6b:f7:11:64:e9:13:c6:4f:f4:34:9d:
         ad:bf:5d:d3:0d:54:27:2a:f3:c5:90:c1:42:47:25:09:56:a6:
         be:8b:ee:e8:1b:57:bd:6b:ac:34:15:7e:27:ba:ea:dc:66:3b:
         6b:58:86:32:c1:d7:53:ec:9a:7b:d3:f0:a1:b6:a5:46:50:b2:
         a4:f6:68:e0:ce:8c:eb:ee:e7:5a:73:fb:6f:31:af:9f:9d:b9:
         2f:3a:1d:f2:d2:3f:f0:c6:c8:f5:fc:d4:41:2d:7c:57:47:84:
         e0:21:bb:54:cf:cd:b1:07:3e:a7:b3:bf:a4:ef:bb:f7:6c:e6:
         cb:e8:20:2a:66:4f:b8:21:ff:8a:28:ab:36:56:57:5d:b7:c8:
         fe:d3:e0:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 18 00:06:47 2025 by rpki-client